Dell OS Recovery Tool vulnerabilities

Dell OS Recovery Tool versions prior to 2.4.4 contain an untrusted search path vulnerability. An unauthenticated attacker with local access could potentially exploit it to execute commands.

Dell OS Recovery tool versions prior to 2.4.4 contain a use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Information Disclosure.

Dell OS Recovery Tool, versions prior to 2.4.4, contains an Insecure Storage of Sensitive Information vulnerability. A low privileged attacker with physical access could potentially exploit this vulnerability, leading to Information Disclosure.